2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-16546 | HIGH | 8.8 | 2.2% | Nov 5, 2017 | The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG ... |
| CVE-2017-16545 | — | — | 2.2% | Nov 5, 2017 | The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which ... |
| CVE-2017-16543 | — | — | 5.6% | Nov 5, 2017 | Zoho ManageEngine Applications Manager 13 before build 13500 allows SQL injection via GraphicalView.do, as demonstrated ... |
| CVE-2017-16542 | — | — | 5.5% | Nov 5, 2017 | Zoho ManageEngine Applications Manager 13 before build 13500 allows Post-authentication SQL injection via the name param... |
| CVE-2017-16540 | — | — | 1.3% | Nov 4, 2017 | OpenEMR before 5.0.0 Patch 5 allows unauthenticated remote database copying because setup.php exposes functionality for ... |
| CVE-2017-16541 | MEDIUM | 6.5 | 3.7% | Nov 4, 2017 | Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discove... |
| CVE-2017-16539 | MEDIUM | 5.9 | 1.8% | Nov 4, 2017 | The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, ... |
| CVE-2017-16538 | — | — | 0.4% | Nov 4, 2017 | drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel through 4.13.11 allows local users to cause a denial of servi... |
| CVE-2017-16537 | — | — | 0.4% | Nov 4, 2017 | The imon_probe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a den... |
| CVE-2017-16536 | — | — | 0.4% | Nov 4, 2017 | The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows l... |
| CVE-2017-16535 | — | — | 0.4% | Nov 4, 2017 | The usb_get_bos_descriptor function in drivers/usb/core/config.c in the Linux kernel before 4.13.10 allows local users t... |
| CVE-2017-16534 | MEDIUM | 6.8 | 0.4% | Nov 4, 2017 | The cdc_parse_cdc_header function in drivers/usb/core/message.c in the Linux kernel before 4.13.6 allows local users to ... |
| CVE-2017-16533 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | The usbhid_parse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8 allows local users to cause... |
| CVE-2017-16532 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | The get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause... |
| CVE-2017-16531 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | drivers/usb/core/config.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-boun... |
| CVE-2017-16530 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and... |
| CVE-2017-16529 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | The snd_usb_create_streams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a ... |
| CVE-2017-16528 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | sound/core/seq_device.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service (snd_rawmidi_d... |
| CVE-2017-16527 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (snd_usb_mixer_inter... |
| CVE-2017-16526 | HIGH | 7.8 | 0.3% | Nov 4, 2017 | drivers/uwb/uwbd.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (general protection... |
| CVE-2017-16525 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows loca... |
| CVE-2017-14359 | — | — | 0.5% | Nov 3, 2017 | A potential security vulnerability has been identified in HPE Performance Center versions 12.20. The vulnerability could... |
| CVE-2017-1000171 | — | — | 1.4% | Nov 3, 2017 | Mahara Mobile before 1.2.1 is vulnerable to passwords being sent to the Mahara access log in plain text. |
| CVE-2017-1000157 | — | — | 0.7% | Nov 3, 2017 | Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable t... |
| CVE-2017-1000156 | — | — | 0.8% | Nov 3, 2017 | Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to a group's configuration ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now